eb06d1dd3c2d27fc6587792b984e2498_JaffaCakes118 | Triage

Sharing

General

Target

eb06d1dd3c2d27fc6587792b984e2498_JaffaCakes118
Size

144KB
MD5

eb06d1dd3c2d27fc6587792b984e2498
SHA1

3dad1c51d221afef839c720c4a7bf4f802d9c32d
SHA256

db9debba3b776b7ff10fa5a58e2c03e45eae1486f7439c1fe4dc3c44adeb4484
SHA512

dd671a04819a2ca6a75fea43743a0e658881661a646a82d637c1889f2d32542f90ad9e2396f80f83e5cf4ee18aa59f7aebe31211ece5367b72ca0035630fc142
SSDEEP

3072:qKtfDwsjPThTYszDH2fgUrMzkm8PL3E7Qw/STyr5Jks7M/2:BtfDwsjPThT5zL2QzkmIL3E7QPQLE2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
eb06d1dd3c2d27fc6587792b984e2498_JaffaCakes118

Files

eb06d1dd3c2d27fc6587792b984e2498_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 33KB - Virtual size: 33KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 512B - Virtual size: 360B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 52KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 17KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ